Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: iCxmpob7QdS+nNG8ELnchYaqXOoqjW7eOi3uRAfWQnM=
Subject key identifier: AA:37:45:84:B4:73:FF:05:F4:A2:CA:7E:86:8A:CB:E9:81:D0:FA:7A
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 0197B6A09729BC89C163F50579BFEB90BF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 034E
Signing time: Sat 28 Jun 2025 13:01:07 +0000
Manifest this update: Sat 28 Jun 2025 13:01:07 +0000
Manifest next update: Sun 29 Jun 2025 13:01:07 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: 3gGyiakUWJhZ2XlE9iyBm9w5TUaNjmg8jO2p1goeINM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:97:29:bc:89:c1:63:f5:05:79:bf:eb:90:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jun 28 13:01:07 2025 GMT
Not After : Jun 29 13:01:07 2025 GMT
Subject: CN=aa374584b473ff05f4a2ca7e868acbe981d0fa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:2a:4b:1e:27:0d:9b:c6:04:2f:20:9f:82:
1f:d6:83:ea:39:d9:91:0c:99:e3:2f:6b:c2:da:7b:
4f:f4:e5:36:b3:70:13:75:cd:02:f5:82:e1:3c:6f:
55:c3:a6:f6:87:7d:e1:e2:f1:df:12:5e:44:e4:01:
b6:d3:26:89:b8:4f:cc:01:ea:eb:54:43:c4:e0:72:
5a:00:cb:e5:19:8d:e9:3d:bb:52:15:e4:b5:da:9c:
bf:08:d8:94:a8:ba:c6:cf:a5:6f:ee:15:8d:2a:a3:
4f:1e:dc:dc:53:7f:5d:3f:84:41:c4:27:51:12:a9:
96:59:f8:ba:95:4b:dc:cb:73:f8:62:80:fb:83:1f:
7b:4a:d7:23:71:fa:ef:b1:9a:a5:a6:57:be:ae:ab:
84:1e:e9:56:72:17:80:0e:9d:eb:6f:df:35:e4:4e:
63:f2:f6:c3:52:d7:9a:12:f8:9f:87:8d:cb:36:85:
4e:87:5a:ae:ca:56:72:33:b3:fe:e7:f3:f2:82:9c:
5d:fc:24:1c:6d:69:e0:65:db:15:52:e2:ac:99:d4:
dc:ae:59:1d:c8:19:8e:06:0b:c1:00:5c:a6:2a:e1:
7f:fc:85:e5:2b:52:8f:f1:91:03:66:5c:ce:b6:e8:
a7:54:05:cf:c5:10:71:f9:9d:57:9f:7d:ee:2d:ad:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:45:84:B4:73:FF:05:F4:A2:CA:7E:86:8A:CB:E9:81:D0:FA:7A
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e7:d8:d9:38:1a:7f:c3:44:9c:ab:86:2c:f0:3b:a5:d5:66:
12:87:da:2b:3f:b4:d5:c1:3a:7f:79:3f:26:30:ee:27:f4:14:
c6:da:d0:4d:36:1e:72:a3:ad:d1:61:62:2e:43:6a:7f:30:b7:
d1:47:e9:e2:82:7b:48:30:30:ab:b5:58:d4:50:7f:2c:16:e1:
be:d1:ed:6b:6e:f8:da:4d:7b:90:b2:88:32:50:ac:1c:82:62:
a4:b8:99:71:3e:d1:49:78:cc:db:08:0e:16:38:ee:60:35:bf:
2c:c8:b7:af:28:01:d0:96:d0:fb:03:d2:7f:fe:4f:67:b7:80:
6d:7c:1d:0f:16:f6:e8:b3:05:81:58:fb:54:84:8b:6d:32:a4:
29:a6:16:07:f7:56:d5:c1:b7:55:83:0b:83:1c:9e:56:6b:76:
c5:8e:8a:23:c9:0d:06:a0:a0:bf:5b:a8:c8:b4:5f:dc:e0:d9:
a3:f3:dd:24:1b:f6:1b:01:df:ec:39:42:82:c2:91:3a:cd:1b:
d3:90:9b:00:41:05:cf:9a:c3:19:d4:b3:ae:90:33:27:3c:53:
b2:2d:1c:26:ac:da:b0:0c:ac:3b:4d:3f:fb:9d:ac:d2:9d:3a:
e1:d9:c8:1b:64:ec:ca:a5:22:07:1e:8f:46:a8:0f:93:f4:a5:
9a:f1:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:43 2025 by rpki-client